blog
35 posts, newest first
2026
- untitled03 (locked)
- HackTheBox: Debugging Interface (locked)
- HackTheBox: The Needle (locked)
- HackTheBox: lowlogic (locked)
- untitled02 (locked)
- HackTheBox: Espresso (locked)
- HackTheBox: CCTV (locked)
- HackTheBox: Kobold (locked)
- HackTheBox: Wingdata exploiting CVE-2025-47812 lua injection in WingFTP for RCE, cracking a salted sha256 hash, then abusing CVE-2025-4138 PATH_MAX overflow to escape tarfile filter and get root
- HackTheBox: Pterodactyl (pinned) exploiting a Pterodactyl game panel via path traversal, PAM environment poisoning, and a udisks2 XFS resize bug to get root
- HackTheBox: Facts (locked)
- ROP Emporium: callme Chaining PLT calls with a multi-argument ROP gadget to invoke three functions in sequence
- ROP Emporium: split Building a ROP chain to call system() with a custom string argument
- ROP Emporium: ret2win Classic buffer overflow exploiting a vulnerable read() to redirect execution to a win function
2025
- wordpress xml-rpc vulnerability on a gov't contractor (pinned) wordpress & its subsequent dangers
- untitled01 (locked)
- picoCTF: Binary Instrumentation II Intercepting & monitoring Windows API calls to find a flag in a hidden buffer
- PicoCTF: Binary Instrumentation I Bypassing sleep functions using Frida
- picoCTF: FactCheck Reversing decompiled C++ code to extract a flag by tracing string manipulation logic
- PicoCTF: WinAntiDbg0x300 (pinned) Bypassing an infinite debugger-killing loop by NOP'ing an unconditional jump
- picoCTF: WinAntiDbg0x200 Further bypassing anti-debugging checks by editing register values
- picoCTF: WinAntiDbg0x100 Bypassing simple anti-debugging techniques in a Windows executable through dynamic analysis
2024
- PicoCTF: Weird Snake Analyzing bytecode to reverse engineer an XOR key
- picoCTF: Shop Learning Ghidra basics
- picoCTF: Crackme-py A simple python challenge
- PicoCTF: Packer Reverse engineering a simple linux executable
- picoCTF: Heap 3 Leveraging a UAF vulnerability to manipulate heap allocation
- PicoCTF: Heap 2 Utilizing a buffer overflow payloads to override pointers
- PicoCTF: Heap 1 Writing and understanding a buffer overflow payloads
- picoCTF: Trickster Exploiting a site that only accepts PNG files
- picoCTF: Format String 2 Writing and understanding a format string payloads
- picoCTF: Format String 1 Easy format string vulnerability
- picoCTF: VNE Abusing environment variables
- N00bzCTF: Sillygoose Exploiting a simple number search binary game
- litCTF: JWT Exploiting JSON Web Tokens